Hi All,

I have a web application that is constantly being attacked with malicious web requests..... mainly xss scripts.

I already have ASP.Net's default page level validations implemented with exceptions being thrown by default.

Is this safe enough or should i consider looking at additional validation efforts ?

thanks